See what mandera collects, where your data lives, who processes it, and how to request a DPA, a data export or deletion.
mandera is privacy-first by design: no cookies, no personal data, hosted in Germany, and your data is never used to train AI. This page is the short, operational overview. The full picture for your legal team, including the complete tables, lives on our Privacy & Compliance page, in the privacy policy and in our Data Processing Agreement.
What mandera collects
mandera measures your traffic without anything that can identify a person: page views, traffic sources, country from the browser timezone, language, device information in shortened form, and engagement such as time on page, clicks and scroll depth.
Not collected: cookies, IP addresses, names or emails, fingerprints, cross-site profiles. Because nothing points to a person, no consent banner is required.
How the measurement works technically is explained in How we track.
Where your data lives
| Legal entity | mandera Software GmbH, Germany |
| Hosting | Hetzner, Germany |
| Data location | EU servers in Germany |
| Transfers outside the EU | none |
Who processes your data
AI runs on Mistral models hosted in the EU, with zero data retention: nothing is stored beyond the request and your data is never used to train AI. For search data, only domains and keywords go to a search data provider, never personal or visitor data. The full sub-processor list is part of our Data Processing Agreement.
Your rights and requests
Request a DPA
Contact mandera with your company name, your organization name and the email address connected to your account. If your legal team has specific requirements, include them in the request.
Export your data
Use data export in Settings. If no export option is visible in your account yet, contact mandera and name the organization and website the data belongs to.
Delete data or your account
Open Settings and go to the Danger Zone, or contact mandera directly. Deletion requests are confirmed before anything is removed, and permanent deletion cannot be undone.
GDPR
mandera is GDPR compliant by design. The analytics collect no personal data, your data stays in Germany, sub-processors are EU-based for AI, and a DPA is available for your records.
Related
How we track
Settings
Help
Privacy & Compliance (full overview)
Privacy policy
Last updated: 12 June 2026